Enumeration dns
Par pepin le lundi, octobre 14 2019, 00:46 - Pentest - Lien permanent
Avec amass
amass enum -d devinci.fr
*.devinci.fr . . . OWASP Amass v3.1.10 https://github.com/OWASP/Amass -------------------------------------------------------------------------------- 20 names discovered - ext: 13, dns: 1, cert: 6 -------------------------------------------------------------------------------- ASN: 31216 - BSOCOM 89.30.0.0/17 5 Subdomain Name(s) 89.30.29.64/26 1 Subdomain Name(s) ASN: 8075 - MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation 40.64.0.0/10 2 Subdomain Name(s) ASN: 2200 - FR-RENATER Reseau National de telecommunications pour la Technologie 194.254.0.0/16 1 Subdomain Name(s) ASN: 35540 - OVH-TELECOM, FR 91.121.32.0/19 1 Subdomain Name(s) ASN: 43424 - PROCEAU 46.252.176.0/20 1 Subdomain Name(s) 185.42.116.0/22 1 Subdomain Name(s) ASN: 16276 - OVH 51.38.0.0/16 1 Subdomain Name(s) 178.32.0.0/15 4 Subdomain Name(s) 54.38.0.0/16 2 Subdomain Name(s) 51.75.0.0/16 1 Subdomain Name(s) 51.83.0.0/16 1 Subdomain Name(s)
Avec DNSRecon
dnsrecon -d devinci.fr -n 8.8.8.8
[*] Performing General Enumeration of Domain: devinci.fr [-] DNSSEC is not configured for devinci.fr [*] SOA ns1.gandi.net 173.246.98.2 [*] NS ns-183-a.gandi.net 173.246.100.184 [*] NS ns-183-a.gandi.net 2001:4b98:aaaa::b8 [*] NS ns-24-c.gandi.net 217.70.187.25 [*] NS ns-24-c.gandi.net 2604:3400:aaac::19 [*] NS ns-65-b.gandi.net 213.167.230.66 [*] NS ns-65-b.gandi.net 2001:4b98:aaab::42 [*] MX devinci-fr.mail.protection.outlook.com 104.47.1.36 [*] MX devinci-fr.mail.protection.outlook.com 104.47.2.36 [*] A devinci.fr 178.32.112.194 [*] TXT devinci.fr 330c25c28543a4b26026f139147cdc2a [*] TXT devinci.fr v=spf1 a:dn1051.mis.ovh a:dn1052.mis.ovh include:spf.protection.outlook.com include:spf.mailjet.com ip4:178.237.108.143 ip4:37.187.138.5 ip4:91.121.86.25 ip4:178.32.112.194 ip4:34.251.196.222 ip4:34.251.218.99 ip4:54.76.226.94 ip4:52.214.126.95 ip4:89.30.29.87 ip4:89.30.29.83 ?all [*] TXT devinci.fr adobe-idp-site-verification=a063b656fac6b8ce5c518e174ce63cd891f45c61716381640e7b0275d975f901 [*] TXT devinci.fr ZOOM_verify_qbIM-NBFTXW8-zVeB4QBgQ [*] Enumerating SRV Records [*] SRV _sipfederationtls._tcp.devinci.fr sipfed.online.lync.com 52.112.194.75 5061 1 [*] SRV _sipfederationtls._tcp.devinci.fr sipfed.online.lync.com 2603:1027::b 5061 1 [*] SRV _sip._tls.devinci.fr sipdir.online.lync.com 52.112.193.13 443 1 [*] SRV _sip._tls.devinci.fr sipdir.online.lync.com 2603:1027:0:9::b 443 1 [+] 4 Records Found